--- ./modules/ssl/ssl_engine_init.c.orig	2016-12-07 15:07:12.725175756 -0500
+++ ./modules/ssl/ssl_engine_init.c.orig	2016-12-07 15:07:41.194201036 -0500
@@ -221,6 +221,10 @@ 
             sc->server->pphrase_dialog_type = SSL_PPTYPE_BUILTIN;
         }
 
+        if (sc->server->ocsp_enabled == UNSET) {
+            sc->server->ocsp_enabled = FALSE;
+        }
+
 #ifdef HAVE_FIPS
         if (sc->fips == UNSET) {
             sc->fips = FALSE;
--- ./modules/ssl/ssl_engine_config.c.orig	2016-12-07 15:07:18.657972855 -0500
+++ ./modules/ssl/ssl_engine_config.c.orig	2016-12-07 15:08:00.121553537 -0500
@@ -129,7 +129,7 @@ 
     mctx->auth.verify_depth   = UNSET;
     mctx->auth.verify_mode    = SSL_CVERIFY_UNSET;
 
-    mctx->ocsp_enabled        = FALSE;
+    mctx->ocsp_enabled        = UNSET;
     mctx->ocsp_force_default  = FALSE;
     mctx->ocsp_responder      = NULL;
     mctx->ocsp_resptime_skew  = UNSET;